LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   LogWatch ftp question (https://www.linuxquestions.org/questions/linux-security-4/logwatch-ftp-question-15101/)

prozach 02-26-2002 07:49 AM
LogWatch ftp question
 
:newbie:
In my Linux LogWatch file that get's emailed to me i am getting this log for ftpd:

connection from cdm-208-135-252-brcs.cox-internet.com [208.180.135.252]

Then that is it. Now that IP address I know is my friends and i see where it says he has logged in. Sometimes I see other ip addresses matched up with anonymous logins that were denied (I dont allow anonymous logins at my site). Other times i will see a line like that above without any matching row where someone tried to login or anything has been rejected or accepted. What causes that? Is there someone connecting but not attempting to login? Should i be worried? I have my machine behind a router with only the specific ports open that i have opened up.

Thanks for your help!

:newbie:


All times are GMT -5. The time now is 05:14 AM.